last executing test programs: 8.058035834s ago: executing program 0 (id=260): mkfifo(&(0x7f00000020c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000001340), 0x200, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000040)={&(0x7f0000001380)='./file0\x00', r1, 0x1}) closefrom(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4) closefrom(r2) flock(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "d6c7c3", 0x0, 0x2c, 0xc5, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x5, 0x0, 0x3}}}}}}}) acct(&(0x7f0000000000)='./file0\x00') setitimer(0x3, 0x0, 0x0) 7.891374699s ago: executing program 0 (id=264): syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a005806210000000000000000000000bbfe80fffffffe000000000000000000aa4e224e2200089078cac7b94a86028ed6d653"]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@empty, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "39bbe6", 0x14, 0x3c, 0x2d, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x23ea6957cbdb5153, 0x810a, 0x0, 0x7}}}}}}}) 7.717167867s ago: executing program 0 (id=268): syz_emit_ethernet(0x2a, &(0x7f0000000240)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x66, 0x0, 0x5, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x66, 0x6}}}}}) syz_emit_ethernet(0x66, &(0x7f0000000300)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "61184a", 0x30, 0x6, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @empty, {[], @udp={{0x2, 0x2, 0x8}, {"cac7b94a86028ed6d6535d2243d0609e29473a29b9fcaab67a2575fb81cc8c3bf3017333c8cfb17b"}}}}}}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x6cbd5ceda029db55, 0x0) unveil(0x0, &(0x7f0000000340)='x\x00') mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$DIOCGETRULES(r1, 0xcd604406, &(0x7f0000000080)={0x7, 0x6483, 0x8001, '\x00', './file0\x00', 0x0, "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"}) ioctl$DIOCXEND(r1, 0xc0044464, &(0x7f0000000000)=0x9) ioctl$DIOCSETIFFLAG(r0, 0xc0284459, &(0x7f0000000340)={'./file0\x00', 0x0, 0xb, 0x8, 0x0, 0x6}) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000e00)=0x8000) ioctl$DIOCRDELTABLES(r1, 0xc450443e, &(0x7f0000001280)={{'./file0\x00', './file1\x00', 0x12, 0x8}, &(0x7f0000000e40)=[{'./file0\x00', './file0\x00', 0x70, 0xe5}], 0xee5, 0x1, 0xffff1df5, 0x3, 0x100, 0x8, 0x42, 0x5}) 7.429528682s ago: executing program 0 (id=282): clock_gettime(0x4, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_pts() r2 = dup2(r1, r1) write(r2, &(0x7f0000000280)="b22746aa", 0x4) mkfifoat(r2, &(0x7f0000000040)='./file0\x00', 0x160) getpeername$unix(r0, 0xfffffffffffffffe, &(0x7f00000000c0)) 6.639210702s ago: executing program 1 (id=303): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x6) recvfrom$inet(r1, &(0x7f0000000040)=""/98, 0x62, 0x2, &(0x7f00000000c0)={0x10, 0x2, 0x0, 0x5}, 0x10) connect$inet(r1, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xac1400aa}, 0x10) closefrom(r0) 6.540339701s ago: executing program 1 (id=309): r0 = socket$inet6(0x18, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/106, 0x6a}, 0x93ba882}, 0x38, 0x1022, &(0x7f0000000480)={0xffffffffffffe000, 0x4}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)=""/4096, 0x1000) shutdown(r0, 0x2) 6.433277363s ago: executing program 1 (id=315): mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async) r0 = open(&(0x7f0000000200)='./file0\x00', 0x8000, 0xed) (async, rerun: 64) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x4a) (rerun: 64) ioctl$DIOCGETQUEUES(r0, 0xc0284408, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x4}, {{0x9, 0x2}, {0x6, 0x7ff}, 0x4}, {{0x9, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) 5.331339663s ago: executing program 6 (id=318): shmget$private(0x0, 0x1000, 0x4c0, &(0x7f0000c08000/0x1000)=nil) 5.32926245s ago: executing program 1 (id=320): open(&(0x7f0000000180)='./file0\x00', 0x0, 0x42) (async) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x42) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r2, r1, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCGETRULESET(r3, 0xc444443b, &(0x7f0000000180)={0x3ff, './file0\x00', './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000080)='./file0\x00', r6, 0x0) setreuid(0x0, r6) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') sysctl$net_pipex(&(0x7f00000004c0)={0x4, 0x23, 0x1}, 0x6, &(0x7f0000000000)="ff2e47d104e28795e08130dceb946f1aa8a710974d4dd38b81c4e4a1fa41ab81eaad3174e3d56ae08dc5311b6f2416c6df5b7a707a67000000000000000000", 0x0, 0x0, 0x0) r8 = shmget(0x3, 0xe000, 0x4a6, &(0x7f0000fef000/0xe000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000200)={{r6, r0, r6, r7, 0x3d5a7cec01a90af6, 0x2, 0x0, 0x0, 0xac}, 0x2, r5, r5, 0x5, 0x0, 0xb50, 0x8000000000000000, 0x8000000000000000, 0xfffffffffffffff2, 0x100, 0x9}) syz_emit_ethernet(0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6fff0700005a3a0000d5e6b7b40700000200001000000000fe8000000000000000000000000000aa030090780101000068804f6900062b7cfe8000000000000000000000000000aaff0200000000000000000000000000013a0003b1660000000200000000000000bf0500786f5a8a8a74a6b1031d47e8cd163cf0cdfbda38dbddff"]) (async) syz_emit_ethernet(0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6fff0700005a3a0000d5e6b7b40700000200001000000000fe8000000000000000000000000000aa030090780101000068804f6900062b7cfe8000000000000000000000000000aaff0200000000000000000000000000013a0003b1660000000200000000000000bf0500786f5a8a8a74a6b1031d47e8cd163cf0cdfbda38dbddff"]) 5.212154553s ago: executing program 6 (id=324): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x2000)=nil, 0x0) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) r1 = socket$inet6(0x18, 0x3, 0x7) stat(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)) recvmmsg(r1, &(0x7f0000002780)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0x38, 0x1040, &(0x7f00000027c0)={0x8, 0x5c}) mkdir(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x204) unveil(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='r\x00') open(&(0x7f0000000940)='./file0/../file0\x00', 0x1, 0x24) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff) 5.211518768s ago: executing program 3 (id=325): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$DIOCRCLRASTATS(r0, 0xc4504448, &(0x7f0000000640)={{'./file0\x00', './file0\x00', 0x20, 0xe}, &(0x7f00000001c0)=[{@broadcast, '\x00', './file0\x00', 0xffff, 0x7, 0x2, 0x7, 0x3, 0xa}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xfffffffe, 0xe, 0x4, 0x8, 0x5, 0x0, 0x1}, {@empty, '\x00', './file0\x00', 0x9, 0x1, 0x18, 0x2, 0x6, 0x0, 0xe}, {@broadcast, '\x00', './file0\x00', 0x5c, 0x0, 0x18, 0x6, 0x4e, 0xff}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8, 0x8800, 0x18, 0x5a, 0x10, 0x0, 0x2}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7ff, 0x1ca3, 0x0, 0x2, 0x7, 0x6, 0x5}, {@multicast1, '\x00', './file0\x00', 0x7, 0xa9, 0x18, 0xa8, 0x2, 0x1, 0x4}, {@broadcast, '\x00', './file0\x00', 0x7, 0x91d, 0xc, 0x0, 0x2, 0xd, 0xff}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8, 0x3, 0x0, 0x4, 0x7, 0x1, 0x5}, {@multicast2, '\x00', './file0\x00', 0x81, 0x8000, 0x18, 0x7f, 0x4, 0xa, 0x3}], 0x9f, 0xa, 0x196, 0xc1f, 0xffff, 0x10001, 0x8, 0x4}) clock_gettime(0x2, &(0x7f0000003680)) socket$inet(0x2, 0x4000, 0x1) accept(0xffffffffffffffff, &(0x7f0000000400)=@un=@file={0x0, 0x0, ""/535}, 0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$audio(r1, &(0x7f0000000040)="e7fee460c55407be36a372dca6903728efeba67488a0c9bc31ad9667678bc58ec8b795de7073bf876773e5b5dff4b583d3b3f9eaa09ecc6a9ed0b8a2bb58259f3255e4f321f885ff3d56c55d8889ea426e00995ce37e0a4b8be31f95a2b0c4ed6c196368572a75f79312375bc9054e5d8401ac297c0ba0a5e1d576afe92e9a5c0d4914fb73c72011655ff645361e49715f4d4661", 0x94) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x2c) mkdir(&(0x7f0000001f40)='./file0\x00', 0x90) 5.150694435s ago: executing program 3 (id=328): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) ktrace(0x0, 0x2, 0x1808, 0xffffffffffffffff) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f0000000100)={0x401, 0xd9, 0x679}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES16=r1]) socketpair(0x1, 0x4001, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000000)='^zs{', 0x4, 0x4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/23, 0x17}, {&(0x7f0000001f40)=""/10, 0xa}], 0x5, 0x0}, 0x7}, 0x38, 0x6042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)="dea61a4d1cedf5f1055f9fe020375689e520e46b18e3acbc0d5f164611cc94cf1d1cf24a5c3d9e7972630139702a686e3b073201f9a26df11c948ee6c414ded266", 0x41}], 0x1, 0x8) accept4(r1, &(0x7f0000002e80)=@un=@file={0x0, 0x0, ""/4099}, &(0x7f0000003ec0)=0x1005, 0x2000) execve(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000180)=')$/\x00-\x86Qw\xaaN\xd3[\x04\x95\xf7*\x12\x8f\xa4\v\x13$P\xe9\xb1\xf0M\x0f`,\f\x10\xdb\nh(\xff\xabD\x90\x06\x98\xeb\x9f\x9caB%\x92\xf2@\xc8\xe6w\xbd\xb1u\x82\x00*e\xdf\"\xbfF\xf7\xba\b\xb8\x12\xe4\xa6F\x00_k\xc2\x91t\xc8\xa6D\xae3\xbf\xd2(\f\x8b\x14\xcc\x1ckB\xc1$\xbb#\x80|\xb8{\xa6`\xdbYd\xa4?\xd1@\xca\xcf\xa0\xe7\xf3\xf3\x04\f\xe7\x82\x8d*wW\xb3Vw\x0f\xf4uI4\xe9\x0f_\x03~q\xfd\x18\xb9G\xba\b\x176?g\x8c\x12\b\xb724\b\"\xf7\x9c\x16\xfeq\xf3\xf6I>\xd0']) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) closefrom(0xffffffffffffffff) ppoll(&(0x7f0000001900)=[{0xffffffffffffffff, 0x80}], 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x18, 0x3, 0x7) getsockopt$sock_int(r5, 0xffff, 0x2, 0x0, 0x0) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000640)='//\x00UQ\x96\b\x00\x00\x00C\v\x0f\xd6K2\xe1e\x8d\xf7\x9fK,\xdd*\x9eB=\xde*\xff\xdf\r\xd9\xa5\xa0k)\x027Y\xb7\xba.DO\xbd\xe42\xb5,\x05\x96\x81a)\xdbT$\'\x10\x8d1\x8cU\x1b\xd7\"t8\xda\xbc\x19\xfc\xca\xf46d\xed\xaf\xf8\x8ah\xba*\xce\x98\x85\xc1\xbdk4L{\x81M7\x1e\x1f\xba\x16c4\xe4\xdbW\x05\xf0\n\x87\xfcH\xa3\x82\xa9{\xabD=O\xcb\xc2Q\x97\xa9\xd9P37\x05|\x00\x1e@\x97T', &(0x7f0000000280)='\xff\xff\xff\xff\xff\xff'], 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='x\x00') mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x11e, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRES32=r3, @ANYRES16=r2, @ANYRESDEC, @ANYRESOCT=r4]) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455a001c18cf000000000000e01b0001ac1400bb080090780b8d0009", @ANYRES16]) seteuid(0xffffffffffffffff) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) sendmsg(r3, &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x28, 0x1, 0x6, "aec8d60b3b238e8fdebbb93a52bafcfcd6fc43cca80e48db0779"}, {0xc0, 0xffff, 0x6131, "ff4316f0aad74968cea21bc8c9142703eac6d859dfea0006a1a650e7a95b6143145592563185aafcb91aa9c79b02e1db9297952a29d26133efd3df737c60f58eae109ed58d272eab5e6663cff5f40631710a4811f08879d617378f7639ffedd943503cd8e5812b58f14e76775ac09ffe897f3a68875b8a8653447c859c34b5e062b1b3c1fff7487faad090143b0c02a678f708cf7cddf598096cfc4416e9dd32a3ff5f0a02ca51822cf0ab6c8538f792fe"}], 0xe8}, 0x3) 3.967950412s ago: executing program 1 (id=329): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) (async) sysctl$net_inet_tcp(&(0x7f0000004a40)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f0000000000)="5fe5a7bb", 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (rerun: 64) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r3, 0x0) (async, rerun: 32) setreuid(0x0, r3) (rerun: 32) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) 3.906120627s ago: executing program 6 (id=331): getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) seteuid(r1) pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{r1, r2, r1, r2, 0x20, 0xfffc, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x7ff, 0xfffffffffffffff3, 0x6, r0, r0, 0x0, 0x0, 0x71e4, 0x0, 0x99}) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00002b7000/0x2000)=nil, 0x2000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x3, &(0x7f0000000180)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400"/104, &(0x7f0000000080)=0x5b, 0x0, 0xfffa) 3.904574816s ago: executing program 1 (id=333): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async) r0 = fcntl$getown(0xffffffffffffff9c, 0x5) kill(r0, 0xa) (async) r1 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r1, &(0x7f0000000400)="c5a7093dd12f51bc6db8b10e070dfccde3b56800", 0x14, 0x40c, &(0x7f0000000500)={0x10, 0x2, 0x3, 0xfffffc00}, 0x10) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) ioctl$DIOCADDQUEUE(r2, 0xc148445d, &(0x7f0000000200)={0x2, 0x5, {'\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', '\x00', './file1\x00', {{0x9, 0x800}, {0x8, 0x6}, 0xe4}, {{0x80, 0x3fc}, {0xa5, 0x80}, 0x8001}, {{0x5, 0x4}, {0x0, 0x9e}, 0x9da1}, {0x8, 0x0, 0x0, 0x9}, 0x0, 0x3, 0x0, 0x200, 0x5}}) (async) r3 = socket$unix(0x1, 0x2, 0x0) stat(&(0x7f0000000000)='.\x00', &(0x7f0000004740)) (async) connect$unix(r3, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0x5) (async) sendsyslog(0x0, 0xfffffd3c, 0x24) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8) 3.742267419s ago: executing program 2 (id=335): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r0) setregid(0x0, 0x0) (async) setregid(0x0, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x39b) sysctl$kern(&(0x7f0000000000)={0x1, 0x4c}, 0x2, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00') (async) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x5) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) seteuid(0xffffffffffffffff) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x2) (async) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x2) rename(&(0x7f0000000000)='./file0/file0\x00', 0x0) 3.740423989s ago: executing program 3 (id=337): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) unveil(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x26e, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) r1 = getgid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$DIOCRDELADDRS(0xffffffffffffffff, 0xc4504444, &(0x7f00000001c0)={{'./file0\x00', './file0\x00', 0x0, 0x8}, 0x0, 0x0, 0x0, 0x80000001, 0x21b, 0xffffffff, 0x5515, 0x2, 0x7}) preadv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000002c0)=""/222, 0xde}], 0x44, 0xfffffffffffffffc) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x11c4) open(&(0x7f00000006c0)='./file0\x00', 0x10000, 0x90) r3 = getegid() getgroups(0x4277, &(0x7f0000000000)=[0x0, r1, r3, 0x0, 0x0, 0x0, 0x0]) setresgid(r7, r6, 0x0) semctl$GETVAL(0x0, 0x45d48036e3f6bf69, 0x5, &(0x7f0000000740)=""/245) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(0x0, &(0x7f0000000200)=0x0, 0x0) setresuid(0x0, 0x0, r10) setresuid(r9, r10, r10) getresuid(&(0x7f0000000040), &(0x7f0000000700), &(0x7f00000000c0)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000640)={{r9, r4, r11, r5, 0x40, 0x8000, 0x0, 0x0, 0x1}, 0x0, 0x81, 0x0, 0x0, 0xbb8, 0x0, 0xf}) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) r12 = syz_open_pts() ioctl$TIOCCONS(r12, 0x80047462, &(0x7f0000002a80)=0x8) r13 = semget$private(0x0, 0x1, 0xa) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYRES8=0x0]) semctl$SETALL(r13, 0x0, 0x9, &(0x7f0000000180)=[0x6]) shmget(0x3, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) 3.576875158s ago: executing program 2 (id=339): r0 = syz_open_pts() write(r0, &(0x7f00000000c0)="23600ce76f932e2a88194c55bf505f066d258a08ee5853e7e67477d9b77fdbee2e65056e2e5eef68857f210e1300a864077fd8101b850eec7cfa070dc0e3d7f619e918e97a8609b06139995e8ebf719bd44ef61a79f34cb0c60a3f92be1a8ab9492bbd1dad25c388c6ca5bbe710e2438591d051ac34fd4ff4e9d95a9145f4fb8bd2b557907c0c4df05c337e9d5c2b7bf464b057f59dadfc407f985b4bfd24699cb487001", 0xa4) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) closefrom(r1) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) (async) r2 = syz_open_pts() (async) r3 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x6, '\x00', 0xc}, 0x1c) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x1007, 0x3, 0xffffffc0, 0xffffffff, "fe83fe7a9542a14123a70000001efe02bfabb686", 0x2, 0xcfe}) (async) write(r0, &(0x7f0000000080)="7ef5b69389691e5c5e", 0x9) 3.575997809s ago: executing program 7 (id=341): r0 = socket$unix(0x1, 0x5, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffff9, 0x7d, 0x1, 0x401, 0x3}, {{r1}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x1, 0x9}], 0xd, 0x0, 0x5215, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind(r2, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) listen(r2, 0x472) r3 = accept4(r2, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$unix(r0, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) recvmmsg(r3, &(0x7f0000002800)={{&(0x7f0000000080)=@in6, 0x1c, &(0x7f0000002740)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/121, 0x79}, {&(0x7f00000013c0)=""/161, 0xa1}, {&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f0000001500)=""/109, 0x6d}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/241, 0xf1}, {&(0x7f0000002680)=""/134, 0x86}], 0x8, &(0x7f00000027c0)=""/59, 0x3b}}, 0x38, 0x83, &(0x7f0000002840)={0x100000001, 0xffffffffffffa4b2}) read(r4, &(0x7f0000000280)=""/161, 0xa1) sched_yield() 3.574261501s ago: executing program 32 (id=333): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async) r0 = fcntl$getown(0xffffffffffffff9c, 0x5) kill(r0, 0xa) (async) r1 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r1, &(0x7f0000000400)="c5a7093dd12f51bc6db8b10e070dfccde3b56800", 0x14, 0x40c, &(0x7f0000000500)={0x10, 0x2, 0x3, 0xfffffc00}, 0x10) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) ioctl$DIOCADDQUEUE(r2, 0xc148445d, &(0x7f0000000200)={0x2, 0x5, {'\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', '\x00', './file1\x00', {{0x9, 0x800}, {0x8, 0x6}, 0xe4}, {{0x80, 0x3fc}, {0xa5, 0x80}, 0x8001}, {{0x5, 0x4}, {0x0, 0x9e}, 0x9da1}, {0x8, 0x0, 0x0, 0x9}, 0x0, 0x3, 0x0, 0x200, 0x5}}) (async) r3 = socket$unix(0x1, 0x2, 0x0) stat(&(0x7f0000000000)='.\x00', &(0x7f0000004740)) (async) connect$unix(r3, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0x5) (async) sendsyslog(0x0, 0xfffffd3c, 0x24) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8) 3.365578715s ago: executing program 2 (id=343): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x30000000, 0x7, 0x520, 0x29, "d7cdaff094024d3b9aef2b40b520eb80b3ce473c", 0x5f214f39, 0x3}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x10, 0x20) mkfifoat(r1, &(0x7f00000000c0)='./file0\x00', 0x2) ioctl$TIOCGETA(0xffffffffffffffff, 0x402c7413, &(0x7f0000000100)) mquery(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2, 0x10, r0, 0x100000000) r2 = accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) r3 = accept$unix(r2, &(0x7f00000001c0)=@file={0x0, 0x0, ""/67}, &(0x7f0000000240)=0x45) mkdir(&(0x7f0000000280)='./file1\x00', 0x80) chmod(&(0x7f00000002c0)='./file0\x00', 0x41) r4 = msgget(0x2, 0x200) msgrcv(r4, &(0x7f0000000300)={0x0, ""/31}, 0x27, 0x2, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f00000003c0)={0xff, 0x6}) msgsnd(r4, &(0x7f0000000400)={0x3, "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"}, 0x107, 0x0) ioctl$BIOCGRTIMEOUT(r5, 0x4010426e, &(0x7f0000000540)) recvfrom$unix(r3, &(0x7f0000000580)=""/95, 0x5f, 0x2000, &(0x7f0000000600)=@file={0x5, 0x1, './file0\x00'}, 0xa) msgsnd(r4, &(0x7f0000000640)={0x2, "8a275b5dbc88b3f20b38a91c8066e25de269333f94a78dd1d2074f1b39dfff6b98eea23225d22566f654ed4e"}, 0x34, 0xad1181d9be27a00f) fstatat(r1, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstatat(r1, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000008c0)=[r6, r7, r8]) lstat(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940)) r9 = open$dir(&(0x7f00000009c0)='./file1\x00', 0x40, 0x2c) fstatat(r9, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40), 0x2) openat$pf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) msgrcv(r4, &(0x7f0000000b40)={0x0, ""/223}, 0xe7, 0x1, 0x1800) rename(&(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80)='.\x00') 3.168698212s ago: executing program 3 (id=345): mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x3, 0x6, 0x401, {[0x6, 0x2, 0x80000001, 0x0, 0x7, 0x200, 0x80000001, 0x9, 0x0, 0x0, 0x1ff, 0xffff, 0x7fff, 0x692, 0x0, 0x22, 0x2, 0xf], [0x3, 0x7fffffff, 0x7, 0x6, 0x8001, 0x101, 0x18000000, 0x2, 0x5, 0x1], [0x2, 0x2, 0x1, 0x80, 0x3, 0xfffffffffffffffe, 0x1000], [0x10000, 0xd, 0x8000, 0x2, 0xd9, 0x9], [{0x400, 0x8, 0xce, 0x400}, {0x3, 0x2, 0x3, 0x400}, {0x1, 0x547, 0x4e0ec4e4, 0x6}, {0x6, 0xeb82, 0x7fffffff, 0x1b}, {0xd, 0x40000007, 0x6, 0x7}, {0x0, 0x1, 0x2, 0x1}, {0x4, 0xa, 0x1, 0x5}, {0x1, 0x6fb, 0x10000, 0x2}], {0x7fff, 0x0, 0xc687, 0x2}, {0x11b, 0x4, 0x80000000, 0xfffffffffffffffc}}}) (rerun: 64) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a5) (async) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r0, 0xc0a86b03, &(0x7f0000000140)=0x1) r1 = socket$inet(0x2, 0x3, 0x0) (async) lchown(0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) pselect(0x0, 0x0, &(0x7f00000000c0)={0xff, 0xffffffffffffff00, 0x7ff, 0x5, 0x0, 0xf, 0x2, 0xa}, 0x0, 0x0, 0x0) (async) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) (async) closefrom(0xffffffffffffffff) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2, 0x6, 0x1, 0x9}, {0x87, 0xda, 0xa2, 0x8003}, {0xfffe, 0x0, 0x7, 0x5}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) (async) r4 = shmget$private(0x0, 0x3000, 0x2eb, &(0x7f00006ca000/0x3000)=nil) shmat(r4, &(0x7f0000000000/0x800000)=nil, 0x1000) (async) shmat(r4, &(0x7f0000333000/0x1000)=nil, 0x0) (async) syz_emit_ethernet(0xb1, &(0x7f0000000380)={@remote, @empty, [{[{0x88a8, 0x2, 0x0, 0x2}], {0x8100, 0x4, 0x1, 0x1}}], {@generic={0x803e, "ac1284cdaea9b3684ba8f40f8f09a018d2dce74b87162a47041ea99532ceb7b8124592a11a50acd5642ea99f555debea090ba927e749ae4765b7ff861f9c80d332919b2183223fa30b3e9ddcb52ff0f2dfa4c6dcf19f206aab26e588f25ac1e053ebd4b7450dafbd7fe3177d2ac1c3e8ee71ff615b21291412b546b3ddcf42c9dd35ffcfd7541afacd7da05763358103a70f7586dc5e1e0f3f14c4"}}}) (async) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) 3.168327377s ago: executing program 7 (id=346): sysctl$kern(&(0x7f0000000140)={0x1, 0x53}, 0x5a, &(0x7f0000000000)="e3fb381c57da382894b95cc3a5b8821e6f3cf020cf44312252cd0145e0962a6674dfa31226c3ab4c3e870b169edd053fab0375a3199706e82b572aee0a9c479377df5f378d3cd69cef0fcdbc99e66c9cfd6bcbc261014327a0396c81eafd0b6a61b043cb74444cb1577ed4ae265c6233165ffdf6a0c3d67cf5cfca65aaea6fbacc3a", 0x0, 0x0, 0x0) 3.166491679s ago: executing program 2 (id=348): syz_emit_ethernet(0x76, &(0x7f00000004c0)={@empty, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "e481e2", 0x40, 0x0, 0x0, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3a}, @hopopts={0x4}], @generic="c51f4f99734aeeb1326f21c6163c79f10a00080000354e6e9c7d9034e1bdc418b96e2e24d7da69d9601624a516f447e3"}}}}}) 3.053604788s ago: executing program 7 (id=351): getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe52) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r4, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000240)=0xc) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) seteuid(0xffffffffffffffff) r6 = semget$private(0x0, 0x3, 0x2b1) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x9}, 0x0, 0x6, 0x0, 0x0, 0xc, 0x0, 0x2f}) semctl$GETNCNT(r6, 0x4, 0x3, 0x0) r7 = syz_open_pts() pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x10000) dup2(r8, r7) kqueue() getresuid(0x0, &(0x7f0000000200)=0x0, 0x0) setresuid(0x0, 0x0, r9) setresuid(r9, r9, r2) 3.052203175s ago: executing program 6 (id=352): fstat(0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0xa) setitimer(0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) fcntl$getflags(r1, 0x3) seteuid(0xffffffffffffffff) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/160) mknod$loop(0x0, 0x4, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x2, 0x0, 0xffffffffffffffff, 0x2000100000005}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x10, 0x0) closefrom(r2) semctl$SETVAL(r0, 0x1, 0x8, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffff9c, 0x29, 0x68, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x1d0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x0) semop(r0, 0x0, 0x0) r5 = kqueue1(0x4) r6 = dup(r5) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000040)=0xc0000000) fstat(r6, &(0x7f0000000000)) 3.051965314s ago: executing program 4 (id=353): r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind(r2, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r4, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r6, 0x0) setreuid(0x0, r6) connect$unix(r1, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) r7 = accept$inet6(r0, &(0x7f0000000000), &(0x7f0000000080)=0x1c) bind$inet6(r7, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x80, "9371327b4803e688971010fc5b19eefa", 0x8}, 0x1c) r8 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r8, 0xc028698a, &(0x7f0000000580)=0x7) seteuid(0xffffffffffffffff) r9 = socket$inet6(0x18, 0x2, 0xfd) bind$inet6(r9, &(0x7f0000000140)={0x1c, 0x18, 0x2, 0xfffffffe, '\x00', 0x4}, 0x1c) 2.862646713s ago: executing program 2 (id=354): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000002180)=[{&(0x7f0000000180)="8a2fc8efa1aff7ec420444edf25372ac958a4a590b61301617c8a7607bd681d554be419a191f5e5cc0d623050d439f60d4d224e37b18ddf4e5b02e34abb56e8b6a21c88e7c67ef883ef08902c784bd1b51cf3815a048e86faca4daf8b6bfd0cd87dd48ae54070c160de9f245f6ee6d22c22131a8839b30a79ecf11b3e4ba1014b9a45f74e578b7cffdc7ad0fa77b9b04e64008746291597f8df2ff2a133940baf615d2fc432b21f100", 0xa9}], 0x1) write(r0, &(0x7f0000000240)="7b796c8141e581f4fe0500e786c2e2a8d27f3f2432697c2208c3001a066f6cc8fa1a68223c85d6705585aa61420cb8bcecb570a9b2c44119c5c09f738fcdf8a323d862fa1f20e0522392b3f7f5489b8596e8c1509715693c00a2e54592d696e72babc85fca051684299ec0d44f69d5fffd6dc75daf63645d52c07f9884019950a357405b762425cabb337e4f93c1490ee797994453c8133fa97de4fc6eb3cfef85938d80e1feca423ea3c86d", 0xac) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r1 = socket$inet(0x2, 0x3, 0x14) sysctl$hw(&(0x7f0000001640)={0x6, 0x18}, 0x2, 0x0, 0x0, &(0x7f00000017c0)='\x00\x00\x00\x00', 0x4) sysctl$net_inet_udp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) ioctl$BIOCLOCK(0xffffffffffffffff, 0x20004276) getitimer(0x1, 0xffffffffffffffff) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_open_pts() syz_open_pts() kqueue1(0x10000) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) closefrom(r4) setrlimit(0x4, &(0x7f0000001ec0)={0x8000000000000001, 0xff}) r5 = syz_open_pts() ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f00000019c0)={0x3fe, 0x6, 0x611d, 0xffff, "fe83fe7a1542a741bb17ee020000fe02bfabb686", 0x3, 0x8}) write(r3, &(0x7f0000000440)="77d5b655ea62eae9fde7030010676cd8db1ec996edd7d7ed03270ef0f2b2f8297c9c837e826358306748c03ff3a4f60b27612626ed9f65562b0cd05d53855b4f2721389eec7f78a46506a93a1dbbcba0ad5ecea394ce2444dcb26e3aa69c90f6f3bafd6d404e9294a5dd2004e1874bf6abc0c3497219a891e864705443b712cc97f923861bcd2fe60f7357e4273bd0397c7c91086e440d233041e747bc143afd7b749cdc", 0xa9) ioctl$DIOCRTSTADDRS(r2, 0xc4504449, &(0x7f00000000c0)={{'./file0\x00', './file0\x00', 0x69, 0xf}, &(0x7f0000000000), 0x80000000, 0x0, 0x7, 0x1, 0x1, 0xfffffff8, 0x10, 0xa1}) ioctl$FIOASYNC(r1, 0xc02069a0, &(0x7f0000000580)=0x7) sysctl$hw(&(0x7f00000000c0)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) unveil(0x0, &(0x7f0000000080)='w\x00') 2.862310529s ago: executing program 5 (id=355): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x10, 0x2, 0x2}, 0x10) socket$inet(0x2, 0x1000, 0xe8) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2, 0x2, 0xe0000000}, 0x10) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x0) 2.861828678s ago: executing program 6 (id=356): r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) ktrace(&(0x7f0000000180)='./file0\x00', 0x0, 0x40002004, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x6) r1 = kqueue1(0x8) kevent(r1, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffc, 0x1, 0x2, 0x8000000000000000, 0x9}], 0x40, 0x0, 0x1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x4003) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)=[{0x2, 0x3}, {0x23, 0x6}], 0x2}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x8, 0x1}}}}}) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = kqueue1(0x10000) socket$inet6(0x18, 0x2, 0x0) setsid() sysctl$hw(&(0x7f0000000100)={0x6, 0x4}, 0x2, &(0x7f0000000280)="ba696601f0d072ec8f8b6822e9403c1b4179bfbd92d61172ca8486d446cfea5918b3efaebf81f0f4458609ecb462862f90efaf53a9cc4401f42007321f892ce6f27b2136c7eadc3ffd59c9207ebf026b2b0d63dad4adf62b38925266af9026214c9d836734085c976f39846d332a74b10f8f33d1390d6f2d6b97fb09dbb049b32e3c94c484deb455c5e61bc8763f13a015c561c48a611c8edcb0946ffae0e9aea37fc5bc15caa5c4b88601bed6", &(0x7f0000000380)=0xad, &(0x7f00000003c0)="cfc5b6d3775fe21e1410ca4ccc681d42a97a9877e69ccec75095d85bd3588cb69ec8f6c4fe404ab6ed39762a439a9d417df8eb44b7b0bb25bcfdb1f6960586dc073c394d37feb6353161a262acb9f6ff8ddc19d0e61d0cf34a652833534490e735085f65539b1a0568f8f2d63d74aca7a24cc70ac6910bc03b322fc2d4dfc33ceacb7452902149f3af63a40aa949430de514e104b0e7c1db5b2e2a2a37", 0x9d) r4 = syz_open_pts() r5 = dup2(r4, r4) ioctl$TIOCSCTTY(r5, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) close(r5) pselect(0x40, &(0x7f0000000080)={0xe3, 0x1d, 0x101, 0x6, 0x8, 0xffffffff, 0x2, 0x40000000003}, 0x0, 0x0, 0x0, 0x0) kevent(r3, &(0x7f0000000000), 0x2f8, 0x0, 0x200, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 2.858006542s ago: executing program 5 (id=357): sysctl$kern(&(0x7f0000000080)={0x1, 0x2e}, 0x2, 0x0, 0x0, &(0x7f0000000040)="2ad513aa", 0x4) 2.822942776s ago: executing program 5 (id=358): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="d69c2becbc99845a92ddaf872c7bacbd87c27ea7f581aeb5d1ea527219b88f9ab07c26fd6049e9ea2a375651483575a6d51f33eee6908eee042f8a9c540d405ac8816e36", 0x44}], 0x1, 0x6) closefrom(r0) shmget(0x3, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="d69c2becbc99845a92ddaf872c7bacbd87c27ea7f581aeb5d1ea527219b88f9ab07c26fd6049e9ea2a375651483575a6d51f33eee6908eee042f8a9c540d405ac8816e36", 0x44}], 0x1, 0x6) (async) closefrom(r0) (async) shmget(0x3, 0x2000, 0x2, &(0x7f0000000000/0x2000)=nil) (async) 2.820437405s ago: executing program 7 (id=359): r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaaaa86dd6f61184a00240601fe80000000000000000000000000f1bbfe8000000000000000000000000000aa4e224e2280089078ca00004a86028ed6d6535d2243d0609e29473a29b9fcaab67a2575fba15262343f8c2d17f6b80bdc35a566b41cb4b8b33378877840030de11219a809e994ce8ed4d3f04867"]) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000030f00", 0x1000004}, 0x1c) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x7) open$dir(&(0x7f0000001880)='./file0\x00', 0x80, 0x105) fcntl$getown(r0, 0x5) ioctl$SPKRTUNE(r1, 0x20005302, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080)={0x90, 0x4}, 0x8) sysctl$hw(&(0x7f0000000340)={0x6, 0x14}, 0x2, 0x0, 0x0, &(0x7f0000000380), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0x7, "4b7eb7a9d5f945c9a4e44de37963bfee", 0x2}, 0x1c) r2 = getpid() open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x381c, r2) r3 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) sysctl$kern(&(0x7f00000001c0)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_pts() ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000200)=0x3) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000240)) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0xd, "00000000fe000000030f00", 0x1000000}, 0x1c) r5 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000030f00", 0x1000004}, 0x1c) r6 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xac, '\x00', 0x1000004}, 0x1c) 2.506179957s ago: executing program 4 (id=360): r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) mmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) 2.505535223s ago: executing program 4 (id=361): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000200)='g$A+', 0x4}], 0x1) unveil(0x0, &(0x7f0000000080)='w\x00') openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000200)='g$A+', 0x4}], 0x1) (async) unveil(0x0, &(0x7f0000000080)='w\x00') (async) 2.480583636s ago: executing program 5 (id=362): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x4f14) r0 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f00000019c0)={0x10, 0x7628, [{&(0x7f0000117000/0x1000)=nil, &(0x7f0000156000/0x4000)=nil, 0x4d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00003f0000/0x2000)=nil, 0x5}, {&(0x7f00002c0000/0x2000)=nil, &(0x7f0000063000/0x3000)=nil, 0x7}, {&(0x7f000012b000/0x3000)=nil, &(0x7f0000293000/0x4000)=nil, 0x1bcee789}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00000fb000/0x3000)=nil, 0xea}, {&(0x7f000010a000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x80000000}, {&(0x7f0000015000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x800}, {&(0x7f0000084000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x38}, {&(0x7f00000d7000/0x3000)=nil, &(0x7f0000309000/0x1000)=nil, 0x8}, {&(0x7f0000095000/0x4000)=nil, &(0x7f00002be000/0x2000)=nil, 0x7}, {&(0x7f00001a8000/0x4000)=nil, &(0x7f0000054000/0x3000)=nil, 0x62c}, {&(0x7f00003b4000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000291000/0x1000)=nil, 0x5}, {&(0x7f000033b000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, 0xd}, {&(0x7f00003d2000/0x1000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xffffffffffffffff}], './file0\x00', 0xe813, 0x6, 0x5, 0xd, [0x10000, 0x4, 0x8, 0x400, 0x2, 0x8, 0xe, 0x7f, 0x4, 0x3, 0xfffffffb, 0x1, 0x1, 0x6, 0x0, 0x401, 0x1000, 0x8, 0x9, 0x3, 0x0, 0xffffffff, 0x6, 0x4, 0x8, 0x80, 0x6, 0x3, 0x4, 0x0, 0x7, 0xd1b, 0x2, 0x10, 0x9, 0x7, 0x9, 0x4bff, 0x5, 0x18e, 0x5, 0x4, 0x0, 0x2, 0x5, 0x0, 0x40, 0x1, 0x7ff, 0x1, 0x3, 0x6, 0xf, 0xfff5, 0xf1e2, 0x64a, 0x9f, 0xfffffffa, 0x0, 0x6, 0x7, 0x2, 0x1, 0xb5b, 0x2, 0x4, 0x8, 0xffa7, 0x1000, 0x7ff, 0x5, 0x5, 0x90000, 0x1, 0xc, 0x3, 0x7e, 0x73, 0x7, 0x3, 0x0, 0x0, 0x2, 0x7, 0x8, 0xffff, 0x7, 0x3, 0x1, 0x4, 0xbc9, 0x8000, 0x2, 0x24000000, 0x1, 0x48, 0x8, 0xb71f, 0x57c, 0x36, 0x8b83c774, 0x9, 0x2b8e, 0x7f, 0x7, 0xd27b, 0x2, 0x21fa00, 0xed13, 0x80000001, 0x10001, 0xa, 0xf, 0x100, 0x80000000, 0xd7, 0x8001, 0x35e, 0x6d, 0x9, 0x1, 0x1, 0x7f, 0x6, 0x4, 0x7fffffff, 0x72df, 0x3, 0x4, 0x83d, 0x8, 0x100, 0x2b, 0x20000, 0xfffffffc, 0x9, 0x4, 0x8, 0x9, 0x1, 0x9, 0x2, 0x3, 0x4, 0x1, 0x4, 0x1ff, 0x1, 0xff, 0x8, 0x586, 0x6, 0x4, 0x7, 0x8, 0x1, 0x5, 0x7f, 0x2db97e48, 0x5, 0x400, 0x6, 0x9, 0x0, 0x7, 0x9, 0xa60a, 0x1, 0x565a3537, 0x4, 0x9b9, 0x1, 0x0, 0x5, 0x6, 0x4, 0x532, 0xa000, 0x10001, 0x0, 0x2, 0xffff, 0x2, 0x3, 0xfffffff8, 0x1d, 0x5, 0x1, 0x3, 0x2, 0x800, 0x7, 0x59c3, 0x7fff, 0x20000, 0x8, 0x4, 0x4, 0x0, 0x3, 0x0, 0x2, 0x101, 0x10000, 0x9, 0xfff, 0x6, 0x8, 0x8, 0xc, 0x8, 0x4, 0x10001, 0x6, 0x0, 0x36, 0xfffffff9, 0x7, 0x401, 0xfffffff9, 0x0, 0x4, 0x7, 0x1, 0x7, 0x8, 0xb6d, 0x2, 0xfffffff7, 0xd, 0x1, 0x9, 0xe, 0x9, 0x8, 0xfffffffc, 0x93, 0x3, 0x7f, 0x2, 0x1, 0x4, 0x8, 0xf4, 0xb, 0x800, 0x7, 0x10001, 0x1000, 0x9, 0x4, 0x1, 0x19, 0x0, 0x400, 0x2, 0x6, 0x6, 0xff, 0xc, 0x8, 0x4, 0xfffffffd, 0x8, 0x4, 0x8c30, 0x4, 0x400, 0x1000, 0x1, 0xe, 0xffffffff, 0x9, 0x2, 0x7fffffff, 0x7fff, 0x1, 0x5, 0x101, 0x0, 0x3, 0x4, 0x7f, 0xd, 0xf, 0xe, 0x401, 0x0, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x10001, 0x2008, 0x9a15, 0x7, 0x2, 0x1, 0x3, 0x9, 0x1e88, 0x2, 0x0, 0x1, 0x1, 0x401, 0x8001, 0x5, 0x5, 0x3, 0x100, 0x1ff, 0x3bf, 0xdbcb, 0x37, 0x4, 0x7, 0x5, 0x4, 0x101, 0x5, 0x101, 0x8001, 0x5, 0x9, 0x2, 0xa, 0x100, 0x7, 0x1, 0xfff, 0x7, 0x42, 0xffff, 0x3, 0xa285698, 0x4, 0x8, 0x7ff, 0x5, 0xfffffffa, 0x9, 0x3, 0x8000, 0x10000, 0x2, 0x101, 0x0, 0x4, 0x4, 0x10, 0xc, 0x3, 0xa, 0x5, 0x8001, 0x10, 0x100, 0xfffffff7, 0x100, 0x45c, 0x8, 0x2, 0x80000001, 0x5, 0xf3, 0x10000, 0x401, 0x7, 0x6c75, 0x0, 0x2, 0x3, 0x1, 0x8000, 0x0, 0x10000, 0x9, 0x9, 0x101, 0x712b226a, 0x5, 0x4, 0xe, 0x0, 0xd2fc, 0x6f2c7d6, 0x10, 0x7, 0x5, 0xd5, 0x200, 0x2, 0x8, 0x1000, 0x4, 0x3, 0x64, 0xc1, 0x2, 0x6, 0x80000000, 0x1, 0x2, 0x5, 0x81, 0x6, 0x9, 0x7, 0x2f, 0x400, 0x4, 0x2, 0x7, 0x5, 0x3, 0x2, 0xed7c, 0xb00, 0x8, 0x2, 0x6, 0x3, 0x101, 0x6e0, 0x102673a, 0x800, 0x1b4, 0x9, 0x6, 0x4, 0x8, 0x2, 0x3, 0x0, 0x2, 0xc, 0x9, 0x80, 0x5, 0x80000001, 0x1, 0x1, 0x9, 0x4, 0x2, 0xf7f, 0x3, 0x7, 0x3ff, 0x3, 0x1000, 0x1000, 0x5, 0x7, 0xfff, 0x4, 0x2ea, 0x3, 0xffffffff, 0x3, 0x8, 0x5, 0x6, 0x400, 0x0, 0x4b4e9feb, 0x9, 0x800, 0x8e1, 0x1, 0x80, 0x8ef5, 0x2, 0x4, 0xfff, 0x5, 0x0, 0x100, 0x0, 0x1, 0x7, 0x8, 0x9, 0xc35, 0x101, 0x1, 0x3, 0x5, 0x2, 0x3d6bf7ce, 0xfffffff1, 0x3, 0x1000, 0x3, 0x3ff, 0x10, 0x9, 0x7, 0xb00000, 0xf, 0x0, 0xfea6, 0x7, 0x3, 0x80000001, 0x7fff, 0xfffffffa, 0x5f1f, 0x9, 0xdc9c]}) sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f00000020c0)=@file={0x0, 0x0, ""/4091}, &(0x7f0000000080)=0x1026) 2.399606602s ago: executing program 4 (id=363): r0 = openat$wsmouse(0xffffffffffffff9c, 0x0, 0x9, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x40047477, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) poll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0xff) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x0, 0x40, 0x8, 0x2000003}, {0x16, 0x6, 0x5, 0x4}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0]) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000f00), 0x180, 0x0) open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x4, &(0x7f0000000000)=0x6, 0x4) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) setresgid(r3, r2, 0x0) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) chdir(&(0x7f0000001d40)='.\x00') syz_emit_ethernet(0x2a, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sysctl$net_inet_ipip(&(0x7f0000000040)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) 2.39899604s ago: executing program 3 (id=364): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$WSDISPLAYIO_GMODE(r1, 0x4004574b, &(0x7f0000000040)) 2.392869447s ago: executing program 7 (id=365): open$dir(&(0x7f0000000180)='.\x00', 0x200, 0x12) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VT_RELDISP(r0, 0x20007604, &(0x7f0000000040)=0x1) 2.390593001s ago: executing program 5 (id=366): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000080)={0x0, 0x0}) pselect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fff, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x18, 0x3, 0x3a) r2 = dup(r1) sendto$inet6(r2, &(0x7f0000000340)="d3735a6a6ea10c2180ac220d7d5974a001b332432904f3636ffdeaa8cc7ba5f245bbca1e77ad0521ee593c91a2ffcce63bbdfa2d783123fdc9246e4f37aeedd3aa8ddf599bea491c39a0f5eb53ff037008129aae571724afcd0d01a0b27838c0d882d8676e41bc7d55cdf3a516f8c994e5260362436031ad4841e10420be4c4d161f475119de63d518a20ed3551444efc9bde6f33801b21b9a3beadd", 0x9c, 0x2, &(0x7f0000000300)={0x1c, 0x18, 0x3, 0x2, "febfe132beaada1fcc9fa0df76735576"}, 0x1c) r3 = socket$inet6(0x18, 0x3, 0x3) recvfrom$inet6(r3, &(0x7f00000001c0)=""/93, 0x5d, 0x0, 0x0, 0x0) mprotect(&(0x7f00001d0000/0x1000)=nil, 0x1000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vfs_nfs(&(0x7f0000000040), 0x3, &(0x7f0000000080)="64ec40877e4449ac9ff43f7b36f7ce691da2bf0a76", 0x0, &(0x7f0000000140)="f105702a1d1cc87bfa09b9accdf22d3dccf8dc9624532bc903454cbc1a7f49286cbb5f29362d6977b391ffc5db96419e5d1ec2a7ec5b67b46a3aad5d6518c29c2c9c839ee9488ae44ad2e9ab2424d0", 0x4f) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), 0x0, 0x0) unveil(0x0, 0x0) 1.887437843s ago: executing program 0 (id=367): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x201) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) open(&(0x7f0000001980)='./file1\x00', 0x80, 0xc3) 1.886675622s ago: executing program 2 (id=368): r0 = syz_open_pts() r1 = kqueue1(0x10000) nanosleep(&(0x7f0000001380)={0xfffffffffffffffb, 0x3}, 0x0) syz_open_pts() sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, &(0x7f0000000040)="a7c720461d8c3999", &(0x7f0000000100)=0x8, 0x0, 0x0) kevent(r1, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffff8, 0x31, 0x1, 0x6e6, 0x3}], 0x4003f7, 0x0, 0xb592, 0x0) 1.886206668s ago: executing program 3 (id=369): pipe(&(0x7f0000000a80)={0xffffffffffffffff}) r1 = kqueue1(0x0) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, &(0x7f0000000180)="3d17f165", 0x4) kevent(r1, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffff8, 0x1, 0x2, 0xffff, 0xf24c}], 0x8, 0x0, 0x400, 0x0) sendsyslog(&(0x7f0000000040)="022425ea1ac11993bedae65a842d6a2fa301a8e85267ceb4217e239f92c01b627e1bef58a41204c044d6ff696b923d1d1c39fef0f71f9a5b95a1fbe1238ca6351d6c4cbdb72e4bf693bd5411c8b434b834069f9309d762c9662d8001000000f06d5532b20819fd210900125104fba86fec73e1ada10b90c9ca513d0be89374f2d8de97de536b2e7b5557f6957eb0331ce143e13012b3bba16fb0ae10f59821040e546a919114d4978a73213f56e6a1a7b4a49b09862986875ea1b0b14a", 0xfffffc78, 0x26) sendsyslog(&(0x7f0000000000)="78580902ced782995a1bb90193", 0xd, 0x5) 1.779671684s ago: executing program 4 (id=370): syz_emit_ethernet(0x39, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "e481e2", 0x3, 0x0, 0x0, @empty, @mcast2, {[], @generic="aefe12"}}}}}) (async) r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, 0x80000000}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/234, 0xea}], 0x1) (async, rerun: 32) sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="f62ffcb7", 0x4}], 0x1}, 0x400) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x400) (async) sysctl$ddb(&(0x7f0000000080)={0x9, 0x3}, 0x2, &(0x7f0000000000)="2ba60004", &(0x7f00000010c0)=0x4, 0x0, 0x0) 1.77872328s ago: executing program 6 (id=371): seteuid(0xffffffffffffffff) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.778382143s ago: executing program 7 (id=372): r0 = socket$inet6(0x18, 0x1, 0x6) r1 = dup(r0) setsockopt$sock_int(r1, 0xffff, 0x1015, &(0x7f0000000040)=0x2, 0x4) listen(r0, 0x0) listen(r0, 0x3) r2 = msgget$private(0x0, 0xa) msgsnd(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000000000000"], 0xea, 0x0) msgrcv(r2, 0xfffffffffffffffe, 0x0, 0x3, 0x1000) poll(0xfffffffffffffffe, 0x0, 0x8) 1.777907551s ago: executing program 4 (id=373): seteuid(0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCPROMISC(r1, 0x20004269) seteuid(0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x10, 0x2, 0x2}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2, 0x2}, 0x10) minherit(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 617.889µs ago: executing program 5 (id=374): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1384) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') 0s ago: executing program 0 (id=375): syz_open_pts() r0 = socket$inet(0x2, 0x3, 0x2) mkdir(&(0x7f0000000640)='./file0\x00', 0x40) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r4, 0x0) open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x200, 0xfdf98e28ba4af85) seteuid(r4) unveil(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='r\x00') futimes(0xffffffffffffffff, &(0x7f0000000100)=[{0x5, 0x8000000000000001}, {0x8001, 0x3}]) setsockopt(r0, 0x0, 0xd, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x2c, 0x68, 0x0, 0x1, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x9, 0x0, 0x100, {[@mss={0x2, 0x4, 0x7}]}}}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. smr: dispatch took 2.369997s pckbd_enable: command error Connection to 10.128.1.8 closed by remote host. init: getty repeating too quickly on port /dev/tty00, sleeping pckbd_enable: command error ?÷iWRߤ:iW 9.9 4M =%h8U:n ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped $%Z-j/Rgδ!~#b~XDik=9[#5lL.KTȴ44 bf- KASAN: invalid write of 104 bytes at 0xffff8000018253b0 from pc 0xffffffff83a4abd6 KASAN: first bad byte at 0xffff800001825414 (+100); shadow 0x04: partial granule (out-of-bounds) KASAN: 0xffff800001825414 is 13332 bytes inside the 16384-byte malloc slot [0xffff800001822000..0xffff800001826000) KASAN: allocated at: #0 malloc+0xda0 #1 sysctl_sysvipc+0x619 #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: pc: sysctl_sysvipc+0x746 KASAN: call trace: #0 kasan_memcpy+0x1ca #1 sysctl_sysvipc+0x746 #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: shadow of 0xffff800001825300..0xffff800001825580 (1 cell = 8 bytes): 0xffff800001825300: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0xffff800001825380: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 >0xffff800001825400: 08 08[04]fb fe fe fe fe fe fe fe fe fe fe fe fe 0xffff800001825480: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 0xffff800001825500: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope panic: Caught invalid memory access at ffff8000018253b0 size 104 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *177177 77011 0 0 0x4000000 1K syz-executor 366973 98042 0 0 0 0 syz-executor db_enter() at db_enter+0x17 panic(ffffffff84632b4f) at panic+0x270 kasan_memcpy(ffff8000018253b0,ffff8000018204e8,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff8000299e3d28,1,2000000001c0,ffff8000299e3d00) at sysctl_sysvipc+0x746 kern_sysctl_dirs(33,ffff8000299e3d28,1,2000000001c0,ffff8000299e3d00,0,1,1ffff0000533c71c) at kern_sysctl_dirs+0x30f kern_sysctl(ffff8000299e3d24,2,2000000001c0,ffff8000299e3d00,0,0,ffff8000299e3f80) at kern_sysctl+0x1ce sys_sysctl(ffff800045ff5a18,ffff8000299e3f80,ffff8000299e3ee0) at sys_sysctl+0x54f syscall(ffff8000299e3f80) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xddeca5fbfb0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: Caught invalid memory access at ffff8000018253b0 size 104 op 1 ddb{1}> show kasan KASAN: invalid write of 104 bytes at 0xffff8000018253b0 from pc 0xffffffff83a4abd6 KASAN: first bad byte at 0xffff800001825414 (+100); shadow 0x04: partial granule (out-of-bounds) KASAN: 0xffff800001825414 is 13332 bytes inside the 16384-byte malloc slot [0xffff800001822000..0xffff800001826000) KASAN: allocated at: #0 malloc+0xda0 #1 sysctl_sysvipc+0x619 #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: pc: sysctl_sysvipc+0x746 KASAN: call trace: #0 kasan_memcpy+0x1ca #1 sysctl_sysvipc+0x746 #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: shadow of 0xffff800001825300..0xffff800001825580 (1 cell = 8 bytes): 0xffff800001825300: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0xffff800001825380: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 >0xffff800001825400: 08 08[04]fb fe fe fe fe fe fe fe fe fe fe fe fe 0xffff800001825480: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 0xffff800001825500: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84632b4f) at panic+0x270 kasan_memcpy(ffff8000018253b0,ffff8000018204e8,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff8000299e3d28,1,2000000001c0,ffff8000299e3d00) at sysctl_sysvipc+0x746 kern_sysctl_dirs(33,ffff8000299e3d28,1,2000000001c0,ffff8000299e3d00,0,1,1ffff0000533c71c) at kern_sysctl_dirs+0x30f kern_sysctl(ffff8000299e3d24,2,2000000001c0,ffff8000299e3d00,0,0,ffff8000299e3f80) at kern_sysctl+0x1ce sys_sysctl(ffff800045ff5a18,ffff8000299e3f80,ffff8000299e3ee0) at sys_sysctl+0x54f syscall(ffff8000299e3f80) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xddeca5fbfb0, count: -9 ddb{1}>